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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH{S) OR THIRTY (30) DAYS, 

WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum Statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )S Responsive to communication(s) filed on 09 September 2005 . 
2a)D This action is FINAL. 2b)^ This action is non-final. 

3) n Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) S Claim(s) 1-56,58-90,92 and 93 is/are pending in the application. 

4a) Of the above claim(s) 7,51-56 and 85-90 is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

6) S Claim(s) 1-56, 58-90, 92 and 93 is/are reiected. 
?)□ Claim(s) is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10) D The drawing{s) filed on is/are: a)^ accepted or b)0 objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction Is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) 0 The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) n Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)n All b)n Some * 0)0 None of: 

1 0 Certified copies of the priority documents have been received. 

20 Certified copies of the priority documents have been received in Application No. . 

3.D Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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1 ) □ Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-413) 

2) □ Notice of Draftsperson's Patent Drawing Review (PTO-948) Paper No(s)/Mail Date, . 

3) M Infonmation Disclosure Statement(s) (PTO/SB/08) 5) □ Notice of Infomial Patent Application 

Paper No(s)/Mail Date see attached . 6) CD Other: . 
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1 . Claims 1-56, 58-90, 92 and 93 are presented for examination. 

2. Tine Affidavit filed on 09/09/2005 under 37 CFR 1.131 has been considered but Is ineffective to overcome 
the references of record. 

3. The evidence submitted is insufficient to establish diligence from a date prior to the date of reduction to 
practice of the references of record to either a constructive reduction to practice or an actual reduction to practice. 
The evidence relied upon fails to any reference to the claimed invention, the application in and of itself , is not the 
claimed invention. 

The rejection is maintained and set forth below. 

1 . The following Is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis for the 
rejections under this section made In this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another 
filed in the United States before the invention by the applicant for patent or (2) a patent granted on an 
application for patent by another filed in the United States before the invention by the applicant for patent, 
except that an international application filed under the treaty defined In section 351(a) shall have the effects 
for purposes of this subsection of an application filed in the United States only if the international application 
designated the United States and was published under Article 21(2) of such treaty in the English language. 

2. Claims 1-6, 8-1 1 . 37-46, 50, 58-59, 75-80, 84, 92 and 93 rejected under 35 U.S.C. 102(e) as being 
anticipated by Sharma etal. (6,754,716) 

The applied reference has a common assignee with the instant application. Based upon the eariier effective 

U.S. filing date of the reference, it constitutes prior art under 35 U.S.C. 102(e). This rejection under 35 U.S.C. 102(e) 

might be overcome either by a showing under 37 CFR 1.132 that any invention disclosed but not claimed in the 

reference was derived from the inventor of this application and is thus not the invention "by another," or by an 

appropriate showing under 37 CFR 1.131. 

As to claim 1 , Sharma et al. taught computer system for restricting network address-based communication 
by selected processes to a set of specific network addresses, the method comprising: associating at least one 
selected process (col. 3, lines 61-66; Note a virtual device Is a process.) with at least one network address (col. 5, 
lines 20-25) ; determining whether an attempted network address-based communication of a selected process is via 
an associated address; and In response to a determination that the communication is via an associated address, 
allowing the communication to proceed (col. 2, lines 1-3). 
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As to claim 2, Sharma et al. taught loading at least one selected process into computer memory; and 
storing at least one association, betweien the process and at least one network address (300, fig 3; col. 5, lines 21-23, 
rebooting a hardware device is equivalent to loading a virtual device ). 

As to claim 3, Sharma et al. taught the associations between selected processes and network addresses 
are stored in an association table in a computer memory of the computer system (300, 308, fig 3). 

As to claim 4, Sharma et al. taught the association table is stored in operating system address space (300, 
308. fig 3). 

As to claim 5, Sharma et al. taught a network address-based communication comprises an attempt to 
designate a network address to be used for subsequent communication (col. 5, lines 44-52). 

As to claim 6, a network address-based communication comprises an attempt to associate a communication 
channel with a network address, this feature is inherit in an Internet system. 

As to claim 8, Sharma et al. taught a network address-based communication comprises an attempt to 
establish a connection to a second process (col. 3, line 55 - col. 4, line 11). 

As to claim 9, Sharma et al. taught a network address-based communication comprises an attempt to 
transmit data to a second process (col. 1 , lines 40-63). 

As to claim 10, Sharma et al. taught the second process (col. 3, lines 61-66; Note a virtual device is a 
process.) is executing in a computer memory of the computer system (col. 3, line 55 - col. 4, line 1 1 ). 

As to claim 1 1 , Shanma et al. taught the second process is executing in a computer memory of a second 
computer system (col. 3, line 55 - col. 4, line 11). 

As to claims 37-40, Sharma et al. taught the operation was performed in software and that the request is 
terminated and no further action is taken, if the address is not authorized. Generating of code is inherent. 

As to claim 41 , Sharma et al. taught the set consists of one network address (col. 5,line 20-33 ). 

As to claim 42, Sharma et al. taught the set consists of at least two network addresses (col. 5, line 20-33 ). 

As to claim 43, Sharma et al. taught associating at least one selected process with at least one network 
address (col. 5, lines 20-32); determining whether an attempted network address-based communication of a selected 
process is via an associated address; and in response to a determination that the attempted communication is not via 
an associated address, not allowing the attempted communication to proceed (col. 5, lines 52-65). 

As to claims 44-46, the attempt to associate a communication channel with a network address is an inherent 
TCP/IP protocol stack as taught by Shanna et al. 
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As to claim 50, Sharma et al. taught the association between networl< devices and the network address, if 
only one address is assigned to the host it would be unique. 

As to claims 58-59, 75-80 and 84, they correspond to the method claims in program code format previously 
addressed. 

As to claim 92, Shanma et al. taught associating at least one selected process (col. 3, lines 61-66; Note a 
virtual device is a process.) with at least one network address (col. 5, lines 20-25) ; detecting when a selected 
process attempts to communicate via an unassociated address; not allowing the attempted communication to 
proceed (col. 2, lines 1-3) . 

As to claim 93, Shamria et al. taught program code for associating at least one selected process with at 
least one network address (col. 5, lines 20-25); program code for detecting when a selected process (col. 3, lines 61- 
66; Note a virtual device is a process.) attempts to. communicate via an unassociated address; program code for 
not allowing the attempted communication to proceed; and a computer readable medium on which the program 
codes are stored (col. 2, lines 1-3). 

3. The following is a quotation of 35 U.S.C. 103(a) which fomns the basis for all obviousness rejections set forth 
in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to 
a person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

4. Claims 47-49 and 81-83 are rejected under 35 U.S.C. 103(a) as being unpatentable over Sharma et al. as 
applied to claims 1 above, and further in view of Official Notice. 

Sharma et al. taught the invention as claimed except for the use of a wild card in the addressing, the use of 
a wild card is well known in art, as it allows multiple association to a single address as would conserve 
memory space. 

Claims 12-36 and 60-74 are rejected under 35 U.S.C. 103(a) as being unpatentable over Sharma et al. as 
applied to claims 1-5, 58 and 59 above, and further in view of Deianov et al. (6,529,985). 

As to claims 12,16, 17, 21 , 24 and 32, Shamia et al. did not expressly teach modifying the software to 
intercept system calls to perform the enhanced features of the ARM, Deianov et al. taught this feature and suggested 
it implementation for modifying software to perform enhanced features. 

As to claim 22, Sharma et al. taught the use of TCP/IP stack (figure 3) 



Application/Control Number: 09/503,975 
Art Unit: 2154 



Page 5 



As to claims 23, 28, 29 and 30, the child process would inherent the attributes of the parent therefore it 
would be obvious that the child process would inherent the association of the network addresses. As to claim 28, it 
would be obvious to store the address for future reference. 

As to claim 31 and 36, it would have been obvious to one of ordinary skill in the data processing art to 
delete the associations to conserve memory within the operating system kernel 

As to claim 13, 18, 25, and 33, Deianov et al. taught storing object code that perfomns the designated task ; 
and wherein intercepting comprises replacing a pointer to a system call with a pointer to the object code, such that 
calling the system call causes the object code to execute (col. 6. lines 16-35). 

As to claims 14, 19. 26 and 34, Deianov et al. taught loading an interception module into computer memory, 
the interception module comprising the object code (col. 6, lines 16-35, figure 3). 

As to claims 15, 20, 27 and 35, Deianov et al. taught the interception module is loaded into a running 
operating system kernel (col. 6, lines 16-35 and figure 3). 

As to claims 60-74, they correspond to the method claims in program code format previously 
addressed, supra. 

Any inquiry concerning this communication or earlier communications from the examiner should be directed 
to Larry D. Donaghue whose telephone number is 571-272-3962. The examiner can normally be reached on M-F 
8:00-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, John 
Follansbee can be reached on 571-272-3964. The fax phone number for the organization where this application or 
proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent Application Information 
Retrieval (PAIR) system. Status infonnation for published applications may be obtained from either Private PAIR or 
Public PAIR. Status information for unpublished applications is available through Private PAIR only. For more 
infomriatlpn about the PAIR system, see http://pair-direct.uspto.gov. Should you have questions on access to the 
Private PAIR system, contact the Electronic Business Center (EBC) at 866-21 7-91 97 (toll-free). If you would like 
assistance from a USPTO Customer Service Representative or access to the automated infonnation system, call 
800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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